SQL Injection

Overview com.bstek.ureport:ureport2-console is an UReport2 is a high-performance pure Java report engine based on Spring architecture, where complex Chinese-style statements and reports can be prepared by iterating over cells. Affected versions of this package are vulnerable to SQL Injection...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2026-38158 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2026-38158 Source advisory: SNYK:JAVA-COMBSTEKUREPORT-18748794...

com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9), com.bstek.ureport:ureport2-font (>=2.0.0, <=2.0.1) +13 more potentially affected by CVE-2023-48848 via com.bstek.ureport:ureport2-core (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-core MAVEN version =2.0.0, =2.0.0, =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2023-48848 Source advisory: OSV:GHSA-9VFC-QXC8-WRPQ...

com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9), com.bstek.ureport:ureport2-font (>=2.0.0, <=2.0.1) +13 more potentially affected by CVE-2023-48848 via com.bstek.ureport:ureport2-core (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-core MAVEN version =2.0.0, =2.0.0, =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2023-48848 Source advisory: GHSA-9VFC-QXC8-WRPQ...

com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9), com.bstek.ureport:ureport2-font (>=2.0.0, <=2.0.1) +13 more potentially affected by CVE-2023-24187 via com.bstek.ureport:ureport2-core (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-core MAVEN version =2.0.0, =2.0.0, =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2023-24187 Source advisory: GHSA-FHJ6-GR87-G4CJ...

com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9), com.bstek.ureport:ureport2-font (>=2.0.0, <=2.0.1) +13 more potentially affected by CVE-2023-24188 via com.bstek.ureport:ureport2-core (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-core MAVEN version =2.0.0, =2.0.0, =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2023-24188 Source advisory: OSV:GHSA-6FCJ-9VFW-JQ2M...

com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9), com.bstek.ureport:ureport2-font (>=2.0.0, <=2.0.1) +13 more potentially affected by CVE-2023-24188 via com.bstek.ureport:ureport2-core (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-core MAVEN version =2.0.0, =2.0.0, =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2023-24188 Source advisory: GHSA-6FCJ-9VFW-JQ2M...

Remote Code Execution

com.bstek.ureport:ureport2-console is vulnerable to remote code execution. A remote attacker is able to read sensitive user files and deserialize local gadgets by connecting the system to a malicious database server...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2022-25767 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2022-25767 Source advisory: GHSA-W39X-CHVM-PJ3C...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2022-25767 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2022-25767 Source advisory: OSV:GHSA-W39X-CHVM-PJ3C...

Deserialization of Untrusted Data in com.bstek.ureport:ureport2-console

All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...

CVE-2022-25767

CVE-2022-25767 affects all versions of the Java package com.bstek.ureport:ureport2-console. The vulnerability enables Remote Code Execution via deserialization when the system connects to a malicious database server, leading to arbitrary file reads and deserialization of local gadgets. Multiple s...

UReport2-console code issues and vulnerabilities

UReport2 is a high-performance pure Java reporting engine based on Spring architecture . A security vulnerability exists in all versions of UReport2-console, which can be exploited by an attacker to perform remote code execution, resulting in arbitrary file reads and deserialization of local...

PT-2022-17500

Name of the Vulnerable Software and Affected Versions com.bstek.ureport:ureport2-console affected versions not specified Description The issue allows for Remote Code Execution by connecting to a malicious database server. This can cause arbitrary file read and deserialization of local gadgets...

Remote Code Execution (RCE)

Overview com.bstek.ureport:ureport2-console is an UReport2 is a high-performance pure Java report engine based on Spring architecture, where complex Chinese-style statements and reports can be prepared by iterating over cells. Affected versions of this package are vulnerable to Remote Code...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2020-21122 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2020-21122 Source advisory: OSV:GHSA-6Q3P-36F4-CWXV...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2020-21122 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2020-21122 Source advisory: GHSA-6Q3P-36F4-CWXV...